Security skills

18,863 tagged Security, measured the same way as everything else here.

Browse within: cybersecurity 506bug-bounty 238agent 230autonomous-pentesting 178generative-ai 178LangChain 177hacking 176skills 132claude-ai 104LLM 101agentic-ai 87ai-security 76openclaw 71antigravity 63

supabase-security

601

Rodriguespn/improve-skills-workshop-aie-europe

Skill Claude CodeCodex

Use when writing any SQL for Supabase — creating views, tables, functions, or RLS policies. Supabase has several security behaviors that differ from vanilla Postgres in ways that silently create vulnerabilities. This skill makes sure those traps are caught before they ship. Trigger whenever the user is working with…

not rated 11 7mo ago A 76 tokens

Aradotso/security-skills

Skill Claude CodeCodex

Browser-based cybersecurity education platform with guided lessons, quizzes, gamified progression, and adaptive learning scenarios for information security practice.

not rated 11 3mo ago A 32 tokens

pr-reviewer

604

synaptent/aragora

Skill Claude CodeCodex

Multi-agent adversarial code review for pull requests.

not rated 11 3d ago A SkillSpector: pass 13 tokens original MIT

clawvet

605

MohibShaikh/clawvet

Skill Claude CodeCodex

Use before installing, trusting, or running any third-party OpenClaw skill, and when the user says "scan this skill", "is this skill safe", "vet/check this skill", "should I install this", "audit my skills", or "clawvet". Also use when reviewing a SKILL.md pulled from ClawHub or an untrusted source.

not rated 11 changed 27d ago A 78 tokens original MIT

mass_verify

606

intimatep/PenTestClaw

Skill Claude CodeCodex

A batch verification process that checks proof-of-concept items against a list of assets. It runs the checks in parallel and produces a results matrix and Markdown report.

not rated 11 7mo ago A 27 tokens

CyberHuaTuo Rescue

607

JinNing6/CyberHuaTuo

Skill Claude CodeCodex

An AI-assisted workflow for diagnosing and fixing coding errors, agent problems, and security issues. CyberHuaTuo is the name of the included AI clinic concept.

not rated 11 today A SkillSpector: pass 52 tokens original Apache-2.0

shell-audit

609

akasecurity/claude-tools

Skill Claude CodeCodex

Audit the shell startup chain (the rc file + every file it sources) for hardcoded credentials, persistence-suspicious patterns, duplicate or dangling aliases, and git-baseline drift. USE WHEN the user wants to review, secure, clean up, or maintain their shell aliases or startup files; check /.zshrc / /.bashrc for…

not rated 11 10d ago A 112 tokens original MIT

web-security-auditor

610

0x-Professor/Agent-Skills-Hub

Skill Claude CodeCodex

Aggregate SAST, SCA, DAST, secrets, API, frontend, and backend security checks into one report.

not rated 11 8mo ago A 30 tokens original Apache-2.0

dependency-analysis

611

usrrname/cursorrules

Skill Cursor

This rule automatically analyzes dependencies before they're installed to provide insights about maintenance frequency, security vulnerabilities, and popularity in the developer ecosystem.

not rated 11 7mo ago A 28 tokens original ISC

container-security

612

EvilFreelancer/secs

Skill Claude CodeCodex

Container and Kubernetes security assessment — image vulnerability scanning, SBOM diff analysis, K8s cluster auditing, RBAC privilege mapping, NetworkPolicy review, container escape testing, and runtime monitoring (Falco/Tetragon). Use when scanning Docker/OCI images, auditing K8s clusters, reviewing Dockerfiles…

not rated 11 2mo ago A 118 tokens original Apache-2.0

dark-web-recon

613

liortesta/ClawdAgent

Skill Claude Code

Da7rkx0 represents dark web reconnaissance capabilities used during authorized threat intelligence gathering and security assessments. Understanding dark web monitoring is essential for proactive defense — identifying leaked credentials, sold data, and emerging threats before they are exploited.

not rated 11 2mo ago A SkillSpector: pass 0 tokens original Apache-2.0

repo-context

614

DefaultPerson/agent-setup

Skill Claude Code

Load a compact snapshot of the current repository into context — structure, stack, docs, git state.

not rated 11 26d ago A 23 tokens original MIT

onecli-gateway

615

taslim/nanoclaw-gws-ea

Skill Claude CodeCodex

OneCLI Gateway: transparent HTTPS proxy that injects stored credentials into outbound calls. You MUST use this skill when the user asks you to read emails, check calendar, access GitHub repos, create issues, check Stripe payments, or interact with ANY external service or API. Do NOT use browser extensions or OAuth CLI…

not rated 11 2d ago A 81 tokens original MIT

agentmd-usage

616

Aaditya1273/Agent.md

Skill Codex

Install, find, link, update and validate engineering standards from the Agent.md registry (304 free MIT markdown standards across 20 categories) using the activate-agentmd CLI; print the breaking changes for the dependency majors this project runs; and lint agent instruction files for leaked keys and prompt injection.…

not rated 11 2d ago A 224 tokens original MIT

dxkit-action

617

vyuh-labs/dxkit

Skill Claude Code

Read a dxkit report and execute fixes — prioritize findings by severity, plan the fix sequence, run the fix, verify the score moved, re-baseline if appropriate. Supports a SCOPED pass to burn down one category at a time (dependency/BOM vulnerabilities, security, code quality, tests, docs), and a BASELINE-CLEANUP pass…

not rated 10 1mo ago A SkillSpector: warn 201 tokens original MIT

sealed-secrets

618

ashfulcra/fulcra-tools

Skill Claude Code

Use when an agent or role needs credentials on a machine that does not have them — a fresh container, a rebuilt host, a successor session — or when sealing, rotating, or verifying secrets kept in a shared object store.

not rated 10 yesterday A SkillSpector: warn 49 tokens original MIT

ChainAware/behavioral-prediction-mcp

Skill Codex

Use this skill whenever a user asks about wallet safety, fraud risk, rug pull detection, wallet behavior analysis, DeFi personalization, on-chain reputation scoring, AML checks, token ranking by holder quality, airdrop screening, lending risk, token launch auditing, or AI agent trust scoring. Triggers on questions…

not rated 10 2mo ago A 440 tokens original MIT

agent-shielded

620

Michae2xl/freedom-stack

Skill Claude CodeCodex

Agent Shielded — Agent Privacy Cloud. Private infrastructure for AI agents in one command: Ollama, n8n, Qdrant, Agent Sandbox, Tor Rotator, Privoxy, Gotify, Agent Dashboard + Prometheus, Grafana, Portainer. Zero data leaks. Triggers: 'agent shielded', 'agent privacy', 'AI agent infrastructure', 'private LLM', 'Ollama…

not rated 10 7mo ago B 123 tokens

nis2-incident-report

621

TheDarkMist/nis2-incident-report

Skill Claude CodeCodex

Drafts NIS2 incident reports for a small WordPress agency or freelancer, especially one acting as supply chain to a regulated client rather than as a regulated entity itself. Use this skill whenever someone needs to draft or produce a NIS2 incident notification: a 24-hour early warning, a 72-hour notification, a…

not rated 10 5mo ago A 185 tokens

JS Reverse Analyzer

622

sjhhh024-cmyk/Spider-JS-Mcp-Skills

Skill Claude CodeCodex

A general-purpose guide for examining JavaScript code to identify website encryption, request signatures, and anti-bot checks, then documenting the findings in Python.

not rated 10 9mo ago A 37 tokens original Apache-2.0

golang-manual-di

623

soulcodex/agentic

Skill Claude CodeCodex

Guides manual dependency injection wiring for Go services: three-tier naming taxonomy (Provide/MustProvide/Must), Must-pattern entrypoints, OS-signal-driven context lifecycle, common provider structs, infrastructure must-builders, interface-segregated bus registration, decorator/tracing wrappers, and…

not rated 10 5d ago A SkillSpector: pass 97 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: